Static task
static1
Behavioral task
behavioral1
Sample
af0f570d7872327fdad002744c6f809e17c2877bdc94472cc03e3a0d5dc0794c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af0f570d7872327fdad002744c6f809e17c2877bdc94472cc03e3a0d5dc0794c.exe
Resource
win10v2004-20220901-en
General
-
Target
af0f570d7872327fdad002744c6f809e17c2877bdc94472cc03e3a0d5dc0794c
-
Size
151KB
-
MD5
9367c8452a3f39661dd66bfbccf3e380
-
SHA1
57cff01e99b5c66a156986f64b1e14dd5800ae04
-
SHA256
af0f570d7872327fdad002744c6f809e17c2877bdc94472cc03e3a0d5dc0794c
-
SHA512
7d4fd8c2a4f7c0eda464a0bcce8a1ae97d77b9712302b7c13d44d892632fb363a46661201d0c4a5fab7c8706c8fc314614a767f4915927e1f498773984a73a9b
-
SSDEEP
3072:LzQWL+V0K56ChYPgvqe1CeTiuX1Y94581i2J:U0g6wY4vzKt1/J
Malware Config
Signatures
Files
-
af0f570d7872327fdad002744c6f809e17c2877bdc94472cc03e3a0d5dc0794c.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ